19181 matches found
PT-2024-21720 · Unknown · Joomla! Cms
Name of the Vulnerable Software and Affected Versions: Joomla CMS versions 3.10.16, 4.4.6, 5.1.2 Description: The pagination class includes arbitrary parameters in links, leading to cache poisoning attack vectors. This issue poses undisclosed risks via remote attack. Recommendations: For Joomla C...
Joomla! 安全漏洞
Joomla! is a free, open source content management system from Joomla! open source. A security vulnerability exists in Joomla! versions 4.0.0 through 4.4.6 and 5.0.0 through 5.1.2, which stems from the presence of improper access control that allows a back-end user to override his or her username...
Joomla! 安全漏洞
Joomla! is a free, open source content management system from Joomla! open source. A security vulnerability exists in Joomla! versions 4.0.0 through 4.4.6 and 5.0.0 through 5.1.2, which stems from a lack of escape mechanism in the email template functionality, resulting in cross-site scripting...
Joomla! 安全漏洞
Joomla! is a free, open-source content management system open-sourced by Joomla! A security vulnerability exists in Joomla! versions 3.4.6 through 3.10.16-elts, 4.0.0 through 4.4.6, and 5.0.0 through 5.1.2, which stems from an insufficient URL validation, which results in an invalid check to see ...
Joomla! 安全漏洞
Joomla! is a free, open-source content management system open-sourced by Joomla! A security vulnerability exists in Joomla! versions 3.0.0 through 3.10.16-elts, 4.0.0 through 4.4.6, and 5.0.0 through 5.1.2, which stems from a paging class that contains arbitrary parameters in a link, which can le...
PT-2024-21721 · Joomla +2 · Joomla! +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions. No information is provided about the estimated number...
Joomla core 4.0.0-4.4.6,5.0.0-5.1.2 - Unauthenticated Improper ACL for backend profile view vulnerability
Unauthenticated Improper ACL for backend profile view vulnerability discovered by ? in WordPress Core Joomla versions 4.0.0-4.4.6,5.0.0-5.1.2...
[20240804] - Core - Improper ACL for backend profile view
Improper Access Controls allows backend users to overwrite their username when disallowed...
[20240805] - Core - XSS vectors in Outputfilter::strip* methods
The stripImages and stripIframes methods didn't properly process inputs, leading to XSS vectors...
[20240803] - Core - XSS in HTML Mail Templates
The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions...
Joomla core 3.0.0-3.10.16-elts,4.0.0-4.4.6,5.0.0-5.1.2 - Unauthenticated XSS vectors in Outputfilter::strip* methods vulnerability
Unauthenticated XSS vectors in Outputfilter::strip methods vulnerability discovered by ? in WordPress Core Joomla versions 3.0.0-3.10.16-elts,4.0.0-4.4.6,5.0.0-5.1.2...
Joomla! 5.x < 5.1.2 Multiple Vulnerabilities
According to its self-reported version, the instance of Joomla! running on the remote web server is 3.x prior to 3.10.16, 4.x prior to 4.4.6 or 5.x prior to 5.1.2. It is, therefore, affected by multiple vulnerabilities. - Inadequate input validation leads to XSS vulnerabilities in the...
Joomla! 4.x < 4.4.6 Multiple Vulnerabilities
According to its self-reported version, the instance of Joomla! running on the remote web server is 3.x prior to 3.10.16, 4.x prior to 4.4.6 or 5.x prior to 5.1.2. It is, therefore, affected by multiple vulnerabilities. - Inadequate input validation leads to XSS vulnerabilities in the...
Joomla! 3.x < 3.10.16 Multiple Vulnerabilities
According to its self-reported version, the instance of Joomla! running on the remote web server is 3.x prior to 3.10.16, 4.x prior to 4.4.6 or 5.x prior to 5.1.2. It is, therefore, affected by multiple vulnerabilities. - Inadequate input validation leads to XSS vulnerabilities in the...
Joomla! XSS Vulnerability (20240705)
Joomla! is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...
Joomla! Multiple XSS Vulnerabilities (20240703, 20240704)
Joomla! is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Joomla! Multiple XSS Vulnerabilities (20240701, 20240702)
Joomla! is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2024-27183
XSS vulnerability in DJ-HelpfulArticles component for Joomla...
